Live · 50 founder seats open

Give your agent root.
Safely.

The secure managed agent platform. One Firecracker microVM per agent — your keys never leave it. From $25/mo with a 30-day money-back.

Contact

Real microVM

Firecracker · KVM boundary

Bring your own key

Lives only in your VM

30-day refund

No questions asked

Pick your harness

Hermes. OpenClaw. Pi. One platform.

Three open-source agent runtimes — all run in their own KVM-isolated microVM with your model keys. Pick one to start; add more later, each in its own VM, founder rate locked per VM.

The problem

Most managed agents are not what they say they are.

The category default for managed AI agents is a Docker container with a friendlier dashboard. That stops being acceptable the moment your agent has the keys.

Docker is not isolation.

Containers share one Linux kernel. Your neighbour's bug becomes your bug. The container escapes are documented, public, and exploited in the wild.

Managed agents see your keys.

Most platforms proxy your model spend through their account. Lock-in by design + vendor markup on every token. You don't own the relationship with your provider.

Setup eats your weekend.

DIY agent infra is renting a box, opening firewall ports, wiring TLS, persistent volumes, systemd units, log forwarding — and then you've earned the right to install Hermes. A managed agent shouldn't ask you to be a sysadmin first.

Features

Hardware isolation. Your keys. Your subdomain.

Multi-tenant bare metal in Frankfurt. One Firecracker microVM per tenant. Same KVM hardware boundary AWS uses for Lambda.

Real Firecracker microVM

KVM hardware boundary per tenant. The same primitive AWS uses for Lambda. 124ms boot.

Bring your own model key

OpenRouter, OpenAI, Anthropic, Nous Portal. Paste once, lives only inside your VM.

30-day money-back

Cancel within 30 days for a full refund. Manual processing within one business day.

Custom subdomain

you.jurniti.com with valid TLS, ready when the VM boots. Pro and Max plans.

Upstream Hermes

We ship uv and the upstream install script; you control which Hermes version lands.

Persistent volume

/var/lib/jurniti/persist survives restarts and re-provisions. Daily snapshot on Max.

Quickstart

Three commands. Then your agent is online.

Run inside the microVM you provisioned. We don't pre-install Hermes — you control the version, the upstream installer is one curl away.

you.jurniti.com●

# Boot one tenant microVM
$ hermes auth add openrouter --api-key sk-or-v1-...
$ hermes dashboard --host 0.0.0.0 --port 9119

# 124ms later …
→ tenant.you.jurniti.com  ·  KVM-isolated

Pricing

Flat monthly. No metered surprises.

Founder cohort: first 50 customers lock the discounted annual price for life.

Starter

$25/mo

Founder annual · $144/yr

1 vCPU
2 GiB RAM
10 GiB SSD
100 Mbit/s

Pro

Max

$99/mo

Founder annual · $588/yr

4 vCPU
12 GiB RAM
100 GiB SSD
500 Mbit/s
Daily snapshot

FAQ

Questions you should ask before paying anyone.

Why a microVM instead of a Docker container?: Docker shares one Linux kernel across every tenant. A bug in your neighbour's container can become your problem. Firecracker spins up a real KVM-backed virtual machine per tenant with hardware-enforced isolation — the same primitive AWS uses for Lambda.
What does BYOK actually mean here?: Your OpenRouter / OpenAI / Anthropic key lives only inside your VM. We never see it, never proxy, never mark up your spend. You pay your model provider direct.
What does the 30-day guarantee cover?: Cancel within 30 days for a full refund, no questions asked. After 30 days, cancel any time and we pro-rate the rest of the month back to you.
Where do my VMs run?: Frankfurt today (Hetzner bare metal). Additional regions land when committed regional MRR clears the cost of a second box.
Can I run multiple agents (Hermes + OpenClaw + Pi)?: Yes — each gets its own Firecracker microVM and its own subscription. So Hermes + OpenClaw + Pi at Starter is 3 × $25 = $75/mo. We deliberately don't bundle multiple harnesses inside one VM: it would break the per-tenant hardware-isolation boundary and starve resources at the Starter tier. Founder-cohort lifetime pricing locks per-VM, so adding a 2nd or 3rd VM during the cohort window keeps the founder rate on each.

Get started

Ready to give your agent root?

From $25/mo. BYOK. 30-day refund. Boots in 124ms.